WPA + Freeradius + Chillispot
Does anyone use Chillispot to use WPA and FReeradius? Could tell me what I have to configure at dd-wrt? thanks _ Show them the way! Add maps and directions to your party invites. http://www.microsoft.com/windows/windowslive/products/events.aspx- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
FW: Help to by a NAS
Hi, Could someone suggest some AP models to buy? I want to do account properly with freeradius. Thanks _ Invite your mail contacts to join your friends list with Windows Live Spaces. It's easy! http://spaces.live.com/spacesapi.aspx?wx_action=create&wx_url=/friends.aspx&mkt=en-us- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Help to by a NAS
Hi, Could someone suggest some NAS models to buy? I want to do account properly. Thanks _ Show them the way! Add maps and directions to your party invites. http://www.microsoft.com/windows/windowslive/products/events.aspx- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Re: No accounting Freeradius + EAP/PEAP/TLS
--
>
> Message: 7
> Date: Thu, 12 Mar 2009 12:17:56 +
> From: a.l.m.bu...@lboro.ac.uk
> Subject: Re: Re: No accounting Freeradius + EAP/PEAP/TLS
> To: FreeRadius users mailing list
>
> Message-ID: <20090312121756.gd28...@lboro.ac.uk>
> Content-Type: text/plain; charset=us-ascii
>
> Hi,
>
> > The Zinwell manual didn't say anything about enabling account. My
> > Freeradius is configured with default values, only things I changed was to
> > use EAP/PEAP and freeradius, at radius database I configured tables NAS,
> > Usergroup, radcheck ang groupreply(Auth-Type:=EAP).
>
> if it doesnt mention it, how do you know it can do it?
>
> you're only real choice is to sniff ALL the traffic on the wire
> from the zinwell and see what the heck its sending. if it doesnt
> send any accounting then theres nothing magical that FreeRADIUS
> (or any other RADIUS server) can do - as the RADIUS server
> doesnt tell the NAS to 'oi, send me stuff!' - the NAS is configured
> to do accounting and then where to send it. if its good, the NAS
> sends accounting packets as per the RFCs.but from personal
> experience 90% of devices out there break accounting in wierd
> and wonderful ways..be it cisco, hp, 3com, zyxel, hauwei etc.
Could you dive me Model? ex: DWL-2100ap... etc.
Thanks
>
> once you DO get accounting packets to the RADIUS server, then thats
> when the real fun begins! ("oh, but i wanted unique per client
> sessions that could be matched to the real user!" argggh! ;-) )
>
> alan
_
Drag n’ drop—Get easy photo sharing with Windows Live™ Photos.
http://www.microsoft.com/windows/windowslive/products/photos.aspx-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Re: No accounting Freeradius + EAP/PEAP/TLS
Hi Ivan, The Zinwell manual didn't say anything about enabling account. My Freeradius is configured with default values, only things I changed was to use EAP/PEAP and freeradius, at radius database I configured tables NAS, Usergroup, radcheck ang groupreply(Auth-Type:=EAP). Could you tell me thar have to be another think at GroupReply and suggest some nas devices? Thanks. > Date: Thu, 12 Mar 2009 00:11:44 +0100 > From: > Subject: Re: Re: No accounting Freeradius + EAP/PEAP/TLS > To: "FreeRadius users mailing list" > > Message-ID: <9kef2edk.1236813104.0870720@kalik.net> > Content-Type: text/plain; charset=ISO-8859-2 > > >I used wireshark and didn't see anything referred about Account Packages. > >Only thing I see is Radius-Access Resquest, Access Challenges and Access > >Accept. > > > > So read Zinwell documentation about enabling accounting. > > Ivan Kalik > Kalik Informatika ISP _ News, entertainment and everything you care about at Live.com. Get it now! http://www.live.com/getstarted.aspx- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Re: No accounting Freeradius + EAP/PEAP/TLS
Hi Ivan, I used wireshark and didn't see anything referred about Account Packages. Only thing I see is Radius-Access Resquest, Access Challenges and Access Accept. Below are informations from my Zinwell G220 Plus, but away, o receibe an error as you see. Do you know what mean? Jan 1 18:55:16 wlan0: A wireless client is associated - 00:16:CF:B3:81:4E Jan 1 18:55:17 wlan0: WPA-TKIP RADIUS authentication in progress... Jan 1 18:55:27 wlan0: Authentication failled! (4-2: ERROR_NONEEQUL_REPLAYCOUNTER) Jan 1 18:55:28 wlan0: Open and authenticated Jan 1 18:56:47 wlan0: A wireless client is deauthenticated - 00:16:CF:B3:81:4E Jan 1 18:56:59 wlan0: A wireless client is associated - 00:16:CF:B3:81:4E Jan 1 18:56:59 wlan0: WPA-TKIP RADIUS authentication in progress... Jan 1 18:57:09 wlan0: Authentication failled! (4-2: ERROR_NONEEQUL_REPLAYCOUNTER) Jan 1 18:57:10 wlan0: Open and authenticated Here is my radius . rad_recv: Access-Request packet from host 192.168.1.20:1024, id=114, length=229 User-Name = "leo" NAS-IP-Address = 192.168.1.20 NAS-Port = 0 Called-Station-Id = "00059e887861" Calling-Station-Id = "0016cfb3814e" NAS-Identifier = "ZPlus AP" NAS-Port-Type = Wireless-802.11 Service-Type = Framed-User Connect-Info = "CONNECT 54Mbps 802.11g" EAP-Message = 0x020700501900170301002087c1a68cee5e03e609b11b139ced4a1e1aac47b5519ace27d5598fa118de8177170301002019b9c21c89dac32bc991955f2eef609c8b1080b69fcb1adff8c5573546fc6cb7 State = 0xfa58367a8e0b8dd7abe16b9498e1d636 Message-Authenticator = 0x3f71351c1f04c73b0a85847aa94352b8 Thanks > >So, I'm very newer with linux also freeradius. If you permit, how can I see > >if the NAS send the account package? I'm using a ZINWELL G220 Plus and TP > >LInk WA501G. > > First run freeradius in debug mode (radiusd -X). If you don't see > accounting packets use wireshark. If wireshark can't see them check if > you have enabled accounting on your AP. > > Ivan Kalik > Kalik Informatika ISP _ Show them the way! Add maps and directions to your party invites. http://www.microsoft.com/windows/windowslive/products/events.aspx- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Re: No accounting Freeradius + EAP/PEAP/TLS
>Is your NAS sending them? If it is, there is a firewall stopping them. >Ivan Kalik >Kalik Informatika ISP Thanks Ivan for fast reply, So, I'm very newer with linux also freeradius. If you permit, how can I see if the NAS send the account package? I'm using a ZINWELL G220 Plus and TP LInk WA501G. At zinwell I received an Authentication Failed, but is passed. NONREPLAY or something else.. Tanks again. _ News, entertainment and everything you care about at Live.com. Get it now! http://www.live.com/getstarted.aspx- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
No accounting Freeradius + EAP/PEAP/TLS
Hi there, I get a little problem with Ubuntu 8.04 + freeradius + EAP/TLS/PEAP + mysql, 'couse I don't receive an Accounting package even response. In Ubuntu is installed freeradius, mysql and open ssl. Could someone help me with this? Thanks _ More than messages–check out the rest of the Windows Live™. http://www.microsoft.com/windows/windowslive/- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
